VPN/Direct Connect Access

Scenarios

If your local data center or private network cannot access SWR through a public network, you can use Direct Connect or VPN to connect to Huawei Cloud VPC and use a VPC endpoint to access SWR.

This applies only to pushing images. To pull images, you also need to configure a VPC endpoint for accessing the private IP address of OBS.

Procedure

Create a VPC. For details, see Creating a VPC.
Create a Direct Connect connection or VPN so that the data center can connect to the VPC through Direct Connect or VPN.
Buy a VPC endpoint.
1. Log in to the VPC Endpoint console.
2. On the displayed page, click Buy VPC Endpoint.
3. Configure the parameters as prompted. In Service List, select com.myhuaweicloud.*******.SWR or com.myhuaweicloud.*******.swr. ******* indicates the region ID.
  
  In some regions, com.myhuaweicloud.*******.SWR is not displayed in the service list. You can search for it by name.
4. Click Next.
5. Confirm the order details and click Submit.
Obtain the private IP address and domain name for accessing the VPC.

By default, the domain name resolution rule is automatically added to Huawei Cloud VPCs.

You only need to configure hosts for non-Huawei Cloud endpoints.
1. Go to the VPC endpoint list.
2. Locate the purchased VPC endpoint and click the ID to go to the details page.
3. On the page displayed, you can view the IP address and private domain name of the VPC endpoint.
  
  Figure 1 Endpoint details page
Configure hosts of the local data center. The hosts IP address consists of the IP address and private domain name of the VPC endpoint. Example:

Figure 2 Example hosts

In this section, 172.xx.xx.xx swr.ap-southeast-1.myhuaweicloud.com is only an example. Replace it with the actual IP address and private domain name.

There are two configuration methods:

Configuring the hosts file in the Linux OS

Configuring the on-premises DNS server
- Configuring the hosts file in the Linux OS
1. Run the following command to open the /etc/hosts file:
```
sudo vim /etc/hosts
```
2. Add a custom domain name in the format of xx.xx.xx.xx swr.xx -xx.myhuaweicloud.com.
  
  xx.xx.xx.xx and swr.xx -xx.myhuaweicloud.com indicate the IP address and domain name obtained in 4, respectively.
3. Run the following command to restart the network.
```
sudo/etc/init.d/networking restart
```
- Configuring the on-premises DNS server
1. Obtain the IP address of the VPC endpoint by referring to 4.
2. Configure DNS forwarding rules on the DNS server in the on-premises data center.
  The methods of configuring DNS forwarding rules vary depending on OSs. For details, see the operation guide of the corresponding DNS software.
  
  This step uses the Linux OS and Bind (common DNS software) as an example.
  1. Edit the /etc/named.conf file to add a zone.
```
zone " swr.xx-xx.myhuaweicloud.com " IN {
  type master;
  file " /var/named/swr.xx-xx.myhuaweicloud.com.zone"; 
};
```
    swr.xx-xx.myhuaweicloud.com indicates the private domain name obtained in 4.
  2. Configure forward DNS resolution. Create a file /var/named/swr.xx-xx.myhuaweicloud.com.zone mentioned in 5.b.i.
```
$TTL     604800
@ IN      SOA       swr.xx-xx.myhuaweicloud.com. root.localhost. (
                           2         ; Serial
                      604800         ; Refresh
                       86400         ; Retry
                     2419200         ; Expire
                      604800 )       ; Negative Cache TTL
;
@    IN   NS   swr.xx-xx.myhuaweicloud.com.
swr.xx-xx.myhuaweicloud.com.    IN   A     xx.xx.xx.xx
```
  3. Restart the service.
    /sbin/service named restart
  - You can query SWR endpoints in different regions in Regions and Endpoints.
  - If no DNS server is available in the local data center, add the endpoint IP address for accessing DNS to the /etc/resolv.conf file of the local data center.
  - swr.xx-xx.myhuaweicloud.com indicates the IP address obtained in Step 4.
Run the following command to verify the configuration:
```
ping  swr.xx -xx.myhuaweicloud.com
```
Use this domain name (swr.xx -xx.myhuaweicloud.com) in the later access to SWR.